CVE-2004-2087: Unknown vulnerability in SandSurfer before 1.7.0 allows remote attackers to gain access as a logged-in user.

Security readout for executives and security teams

SandSurfer versions before 1.7.0 had an unspecified remote-access flaw that could let an attacker gain access as a logged-in user. The public record does not explain the root cause, severity, or exploit method, so urgency depends on whether legacy SandSurfer is still deployed and reachable. Exposure is most likely limited to legacy SandSurfer installations older than 1.7.0. Risk rises if the service is internet-facing or handles authenticated user sessions. The bundle does not identify vendors, platforms, or CPEs. Prioritize as a legacy exposure check, not an emergency, unless SandSurfer is confirmed in production and reachable. The business concern is unauthorized access to an authenticated user context, but public evidence is too sparse for a precise severity rating. Mitigation focus: Inventory any SandSurfer deployments and confirm exact versions.; Upgrade SandSurfer installations older than 1.7.0 to 1.7.0 or later.; If upgrade is not possible, restrict network access to trusted users..

Prepared

Jun 29, 2026, 20:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.